This document describes how moderor.ai operates as a platform, how we handle personal data, and the rights available to you across EU/UK, California, India, UAE, and other jurisdictions.
Who we are
Moderor.ai is an AI-native enterprise platform offering agentic automation, analytics, and integrations for business operations.
This policy explains how personal data is collected, used, shared, stored, and the rights available to individuals across key jurisdictions (EU/UK, California, India, UAE).
What this policy covers
- Categories of personal data collected
- Purposes and legal bases for processing
- Regional rights: GDPR, CCPA/CPRA, India DPDP Act, UAE PDPL
- Data residency and international transfers
- Sub-processors and third-party sharing
- Data retention and deletion
- Security safeguards
- Data Subject Rights (DSR) workflow and request process
- Contact information for privacy matters
Personal data we collect
- Identity and contact dataName, email, phone, company, role, country/region.
- Account and usage dataLogin, device/browser metadata, IP, usage events, logs, preferences.
- Transactional and support dataSubscriptions, billing metadata, support tickets.
- Integration dataData processed via connected systems per customer instructions.
- Cookies and similar technologiesAnalytics, security, preferences.
Purpose and lawful basis of processing
Purposes:
- Provide and operate the platform, integrations, and support
- Secure, monitor, and improve platform performance
- Communicate product updates, demos, and events
- Fulfill legal obligations and enforce agreements
Lawful bases:
- GDPRConsent, contract performance, legitimate interests, legal obligation.
- California (CCPA/CPRA)Required disclosures; honor opt-out signals; non-discrimination.
- India DPDPConsent and legitimate uses; notice; purpose limitation; breach reporting.
- UAE PDPLFairness; transparency; minimization; accuracy; security; storage limitation.
Your privacy rights and how to exercise them
- EU/UK GDPR rightsInformed, access, rectification, erasure, restriction, portability, objection, no automated decision.
- California CCPA/CPRA rightsKnow, delete, correct, opt-out of sale/share, limit sensitive PI, non-discrimination.
- India DPDP rightsAccess, correction, erasure, grievance redressal, nominate, consent for children.
- UAE PDPL rightsAccess, rectification, erasure, restriction, objection, cease processing/transfer.
Submit a Data Subject Request (DSR):
- Online: Privacy/DSR Request
- Email: Hello@moderor.ai
- Timelines: GDPR 30 days; CCPA 45 days; India & UAE per local rules
Data residency and cross-border transfers
- Configurable storage regions per contract
- EU/UK: adequacy or SCCs/BCRs
- India: transfers except restricted; localization evolving
- UAE: adequate safeguards; free-zone regimes
- California: no residency mandate
Sub-processors and third-party sharing
- CategoriesHosting, analytics, CRM, monitoring, authentication, payments.
- ObligationsDPAs; confidentiality; security controls; DSR assistance.
- TransparencySub-processor list; change notifications.
Retention and deletion
Retain only as needed; then delete or anonymize.
- Marketing leads: 24 months
- Account data: contract life + 24 months
- Logs: 12–18 months
- Support: 24 months
Security
Encryption in transit and at rest; access controls; MFA; backups; incident response.
Children's data
Not directed to children under 16; parental consent where applicable.
Automated decision-making and profiling
Rights to object or request human review as per jurisdiction.
International differences and free zones
- UAE DIFC/ADGM separate regimes
- Update quarterly with new rules
Contact information
- Email: hello@moderor.ai
- Address: 701 Brazos Street, Ste. 720, Austin TX 78701
- Phone: +1 972 200 4828
Changes to this policy
Material changes will be announced with a new effective date.
See it on your data.Live in weeks.
Connect a data source, point an agent at a workflow, and watch the first governed outcomes arrive on your infrastructure, with your people in command.